During installation, there might be an error displayed that the CAB file has an invalid digital signature. The error is displayed during the ProgressDlg:
A file that is required cannot be installed because the cabinet file <path>. cab has an invalid digital signature. This may indicate that the cabinet file is corrupt.
- invalid_signature.png (9.76KiB)Viewed 325795 times
If looking in the Digital Signature details, you may see the following message:
- digital signature details.png (7.71KiB)Viewed 325792 times
This is typically caused in a disconnected environment where the trusted certificate authorities are not updated automatically.
Also, when using the new timestamping Cross-Root certificates, the /ac parameter must be used. Read more about in the Authenticode Signature Verification Fails with New Timestamping Cross-Root article.
The following command line will address this case:
Code: Select all
sign /ac "PathToCert\CodeSigningCrossCert.crt" /tr http://timestamp.digicert.com /td sha256 /fd sha256 /a /d "[|Manufacturer]" To use the above command line, select the Custom option for the SignTool in the Digital Signature page and configure it as below:
- Custom option dig sig.png (38.5KiB)Viewed 325795 times
Hope this helps!
Best regards,
Dan